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IDENTIFYING UNWANTED ELECTRONIC MESSAGES 



300 



Identify a security condition 
for nnessages exchanged 
(See Fig. 4 for payload 
portions inspection and Fig. 
5 for multisystem 
inspection) 



310 



Hostile 



* ^ 320 

' % 

# Is security condition hostile, ^ 
' % indetemninate or neutral? ^ 



Indeterminate 
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Track message with 
indetenninate profile 
(See Fig. 6) 
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Neutral 
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Reject message 



Accept message 
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Fig.3 
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Exchange 
message 
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Inspecting message 
payload portion 
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Compare characteristics of the payload portion 
of the message inspected with data store of 
characteristics of payload portion of other 



430 



Identify a security condition based on the comparison of the payload 
portion of the messages inspected. 



Process message based on 
security condition identified 
(See step 320 in Fig. 3) 



Fig. 4 
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Exchange message 



inspect message 




I 

Compare characteristics of 

message inspected with 
data store of characteristics 
that includes characteristics 

of messages received 
across more than one local 
exchanging system 
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Identify a security condition 
based on the comparison of 
the message inspected 
across more than one 
receiving system 



Process message based on 
security condition identified 
(See step 320 In Fig. 3) 




Fig. 5 
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Fig. 6 



